$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/607e03b3-c1cd-33a7-9a62-9057775306ab.roa File: 607e03b3-c1cd-33a7-9a62-9057775306ab.roa (raw, json) Hash identifier: EK+7RHTzx4AJ1bSg9yZdjYpYd8ZgF0VZon7iP8EW+IU= Subject key identifier: 51:EF:26:69:29:71:24:4E:3C:A1:36:71:3A:85:73:17:43:66:C5:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D8F7A8F043B2CFCE26960 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/607e03b3-c1cd-33a7-9a62-9057775306ab.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 66.173.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8f:7a:8f:04:3b:2c:fc:e2:69:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d0042b4f-3b40-4423-933b-1b3a93e71e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:99:e0:e5:1b:62:73:d2:6d:bb:09:41:34: 3a:02:a1:36:5c:3a:ad:79:28:a7:f8:42:3f:6f:93: 7c:38:4d:bb:04:dd:97:49:cc:fe:5f:49:b0:99:bd: bb:ab:63:ea:58:31:d6:06:18:75:19:c5:d2:01:a9: 7e:8b:b4:58:4d:1c:2f:89:22:82:ba:a1:4b:93:8d: 57:bc:81:6a:fb:04:ba:c5:19:a9:6d:30:22:bd:49: 94:5e:98:c5:e5:f2:31:07:d5:df:0d:39:3a:2a:34: f6:e3:15:e2:d4:4a:2f:0d:25:b3:68:f3:72:42:f6: 6a:b0:83:1d:5f:18:d9:03:23:3f:19:e2:d2:75:91: 93:4e:ab:27:0c:fc:84:5c:1c:9f:b5:5f:95:28:2e: c9:00:18:d6:23:fb:6f:5a:f3:a3:d0:3a:a6:54:48: db:15:64:0d:d2:1f:29:a6:f3:58:5e:7f:83:5a:e2: 6c:40:6b:e1:d1:03:49:2b:04:52:1e:2c:22:1b:d3: 5e:5a:0f:17:8f:49:96:40:40:10:8f:2c:64:63:fd: 98:cb:1e:91:e7:90:b6:87:5b:eb:c4:a3:68:04:22: fe:42:86:20:e3:07:10:da:3a:4b:eb:7d:ad:b8:75: f0:61:bc:ba:d3:54:7c:9f:ce:ed:07:02:87:c6:68: ed:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EF:26:69:29:71:24:4E:3C:A1:36:71:3A:85:73:17:43:66:C5:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/607e03b3-c1cd-33a7-9a62-9057775306ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.173.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2e:87:f6:55:86:5c:90:b8:63:ea:3b:a9:b8:8c:a4:1c:4f: cb:db:58:f1:d8:75:3a:6f:fe:5f:51:2b:1f:dd:e1:5e:bd:49: 16:19:3c:05:ca:66:66:f3:26:19:3b:04:61:6d:ee:d6:31:85: ec:fe:25:e5:b8:02:cf:02:c7:c5:b0:d8:21:bd:56:7d:48:20: 1a:22:d5:3d:77:0d:61:0b:98:d7:45:03:dc:3e:54:e0:d2:1b: b3:2f:a7:9e:24:2b:4b:a0:ca:bd:c7:e4:ae:ff:a8:84:51:c0: a8:5d:7a:0c:e0:93:a0:3c:10:d1:19:71:74:dd:b7:69:24:f5: aa:52:b9:bd:cd:2e:5b:1b:b1:48:a8:36:d4:aa:8b:41:ca:ce: 80:c5:40:af:a5:ab:ce:d0:99:2d:c5:8f:d5:70:53:31:2c:40: 11:f2:f8:7f:15:64:ea:b2:e5:83:3a:3c:a9:68:85:39:aa:92: 02:69:40:9f:53:96:68:77:a1:81:a8:b6:93:39:db:cd:d6:06: 09:25:80:45:a3:b1:22:37:64:6f:7b:b7:a7:b0:f3:b7:72:06: 22:3a:b5:9a:db:09:a6:9a:6a:e4:f3:dc:a7:8c:6d:b1:35:6b: f9:75:b5:80:3f:c8:9b:34:78:39:4b:21:23:f9:0f:af:60:4b: 8f:d7:14:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnY96jwQ7LPziaWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDAwNDJiNGYtM2I0MC00NDIzLTkzM2ItMWIzYTkzZTcxZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHWZ4OUbYnPSbbsJQTQ6AqE2XDqteSin+EI/ b5N8OE27BN2XScz+X0mwmb27q2PqWDHWBhh1GcXSAal+i7RYTRwviSKCuqFLk41X vIFq+wS6xRmpbTAivUmUXpjF5fIxB9XfDTk6KjT24xXi1EovDSWzaPNyQvZqsIMd XxjZAyM/GeLSdZGTTqsnDPyEXByftV+VKC7JABjWI/tvWvOj0DqmVEjbFWQN0h8p pvNYXn+DWuJsQGvh0QNJKwRSHiwiG9NeWg8Xj0mWQEAQjyxkY/2Yyx6R55C2h1vr xKNoBCL+QoYg4wcQ2jpL632tuHXwYby601R8n87tBwKHxmjtaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHvJmkpcSROPKE2cTqFcxdDZsVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjA3ZTAzYjMtYzFjZC0z M2E3LTlhNjItOTA1Nzc3NTMwNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQq2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQuh/ZVhlyQuGPqO6m4jKQcT8vbWPHYdTpv/l9RKx/d4V69SRYZPAXK ZmbzJhk7BGFt7tYxhez+JeW4As8Cx8Ww2CG9Vn1IIBoi1T13DWELmNdFA9w+VODS G7Mvp54kK0ugyr3H5K7/qIRRwKhdegzgk6A8ENEZcXTdt2kk9apSub3NLlsbsUio NtSqi0HKzoDFQK+lq87QmS3Fj9VwUzEsQBHy+H8VZOqy5YM6PKlohTmqkgJpQJ9T lmh3oYGotpM5283WBgklgEWjsSI3ZG97t6ew87dyBiI6tZrbCaaaauTz3KeMbbE1 a/l1tYA/yJs0eDlLISP5D69gS4/XFLo= -----END CERTIFICATE-----Generated at Tue Sep 29 13:03:56 2026 by rpki-client